PT-2024-32061

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the ssidencrypt 5g%d parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32066

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iprofileidx parameter at the "dialin.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46594

The CVE-2024-46594 entry concerns DrayTek Vigor 3910 firmware v4.3.2.6, where a buffer overflow exists in the saveVPNProfile parameter of v2x00.cgi. This is described as allowing a Denial of Service via crafted input. Documents confirm the affected component is the v2x00.cgi endpoint and that the...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sPubKey parameter on the dialin.cgi page that fails to properly validate the length of the input data, and...

CVE-2024-46597

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the ssidencrypt%d parameter of the v2x00.cgi page. An attacker can cause...

CVE-2024-46588

CVE-2024-46588 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the sProfileName parameter of wizfw.cgi, leading to Denial of Service via crafted input. Exploitation details are not provided in the connected documents; no remediation or workaround is stated in the...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sProfileName parameter of the wizfw.cgi page. An attacker can cause ...

PT-2024-32059 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the ssidencrypt%d parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: Fo...

PT-2024-32040 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the newProname parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...

PT-2024-32063

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the saveitem parameter at the "lan2lan.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

CVE-2024-46566

Draytek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sAppName parameter of sslapp.cgi, leading to Denial of Service via crafted input. Several sources corroborate the issue and impact on the affected device; a patch/version with fix is not provided in the documents. A temp...

CVE-2024-46565

DrayTek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sSrvName parameter of the service.cgi endpoint, enabling Denial of Service via crafted input. The vulnerability is documented across multiple sources with no explicit patch version provided. Mitigation guidance varies: s...

PT-2024-9702 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: The issue is related to a buffer overflow in the sAppName parameter at the "sslapp.cgi" endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability ca...

CVE-2024-46588

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46583

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...